The Internet’s Original Spoiler Tag
Before Reddit had spoiler tags and Discord had ||hidden text||, Usenet had ROT13. Someone wanted to discuss the ending of a movie without ruining it for others, so they’d shift every letter by 13 positions. The butler did it became Gur ohgyre qvq vg. If you wanted to read the spoiler, you chose to decode it. If not, you scrolled past.
ROT13 is a Caesar cipher with a fixed shift of 13. Because 13 is exactly half of 26 (the English alphabet’s size), it has a neat mathematical property: encoding and decoding are the same operation. Apply ROT13 to Uryyb and you get Hello. Apply it again and you’re back to Uryyb. One function does both jobs.
It’s absolutely not encryption. There’s exactly one “key” and everyone knows it. But that was never the point.
How It Transforms Text
Every letter shifts 13 places forward. A becomes N. B becomes O. N wraps back around to A. Uppercase stays uppercase, lowercase stays lowercase. Numbers, spaces, and punctuation don’t change at all.
Hello World turns into Uryyb Jbeyq. The structure’s the same — word lengths, spacing, capitalization all preserved. That’s actually what makes it recognizable. If you’ve spent any time in tech communities, you can spot ROT13 by its characteristic pattern of gur (the), naq (and), and vf (is).
Where You’ll Still Encounter It
CTF competitions. ROT13 shows up as a warm-up challenge in practically every beginner CTF. You get a string, you recognize the pattern, you decode it in 3 seconds. Move on to the real challenges.
Geocaching. Cache owners sometimes ROT13-encode hints. GC.com even has a built-in decoder on cache pages because it’s so common.
Unix jokes. The classic Unix fortune command pipes through tr 'A-Za-z' 'N-ZA-Mn-za-m' — which is ROT13 implemented as a character translation. Old-school sysadmins still use it for hiding punchlines in config file comments.
Forum games and puzzles. When someone posts a riddle and wants to include the answer without spoiling it, ROT13 still works. It’s an intentional speed bump, not a lock.
What ROT13 Isn’t
It’s not security. Don’t use it to “protect” anything. An email address run through ROT13 will stop exactly zero determined scrapers. A password encoded with ROT13 is still a plaintext password, just wearing a hat.
For actual encoding that serves a technical purpose (like transmitting binary data through text-only channels), use the Base64 Encode / Decode tool. For the full Caesar cipher experience with variable shifts and brute-force mode, the Caesar Cipher tool on Toolsvu lets you pick any shift from 1 to 25.